WGU C702 FORENSICS AND NETWORK
INTRUSION EXAM OBJECTIVE
ASSESSMENT AND PRE- ASSESSMENT
2025/2026 bank | ACCURATE CURRENTLY
TESTING EXAM VERSIONS | ACCURATE
AND VERIFIED FOR GUARANTEED PASS
| LATEST UPDATE
Forensic data duplication involves the creation of a file
that has every bit of information from the source in a raw
bit-stream format. - ....ANSWER...True.
What document is used as a written record consisting of all
processes involved in seizure, custody, control, transfer,
analysis, and disposition of physical or electronic
evidence? - ....ANSWER...Chain of custody document.
What is the process of permanently deleting or destroying
data from storage media? - ....ANSWER...Media
sanitization.
The process of acquiring volatile data from working
1
,computers )locked or in sleep condition) that are already
powered on is: - ....ANSWER...Live data acquisition.
Which of the following refers to the data stored in the
registries, cache, and RAM of digital devices? -
....ANSWER...Volatile information.
Where are deleted items stored on Windows Vista and
later versions of Windows? -
....ANSWER...Drive;\$Recycle.Bin
Where are deleted items stored on Windows 98 and earlier
versions of Windows? - ....ANSWER...Drive:\RECYCLED
Where are deleted items stored on the Windows 2000, XP,
and NT versions of Windows? -
....ANSWER...Drive:\RECYCLER
What is the maximum size limit for the Recycle Bin in
Windows prior to Windows Vista? - ....ANSWER. 3.99GB
Which of the following is NOT a feature of the Recover
My Files tool? - ....ANSWER...recovering files from a
2
,network drive.
What tool is used for format recovery, unformatting and
recovering deleted files emptied from the Recycle Bin, or
data lost due to partition loss or damage, software crash,
virus infection, or unexpected shutdown and supports
hardware RAID - ....ANSWER...EaseUS
Which tool undeletes and recovers lost files from hard
drives, memory cards, and USB flash drives? -
....ANSWER...Disk Digger
Which tool recovers files that have been lost, deleted,
corrupted, and even deteriorated? - ....ANSWER...Quick
Recovery
Which tool recovers lost data from hard drives, RAID,
photographs, deleted files, iPods, and removable disks
connected via FireWire or USB? - ....ANSWER...Total
Recall
Which tool scans the entire system for deleted files and
folders and recovers them? - ....ANSWER...Advanced
Disk Recovery
3
, Which tool for MAC recovers files from a crashed or virus-
corrupted hard drive? - ....ANSWER...Data Rescue 4
Which of the following are frequently left by criminals,
assisting investigators in understanding the process of
crime and the motive behind it, and allowing them to
attempt to identify the person(s) who committed it? -
....ANSWER...Fingerprints
In Detecting Rootkits, the following technique is used to
compare characteristics of all system processes and
executable files with a database of known rootkit
fingerprints. - ....ANSWER...Signature-Based Detection
In Anti Forensics Techniques, which of the following
techniques is used to hide a secret message within an
ordinary message and extract it at the destination to
maintain confidentiality of data? -
....ANSWER...Steganography
Which of the following consists of volatile storage? -
....ANSWER...RAM
4
INTRUSION EXAM OBJECTIVE
ASSESSMENT AND PRE- ASSESSMENT
2025/2026 bank | ACCURATE CURRENTLY
TESTING EXAM VERSIONS | ACCURATE
AND VERIFIED FOR GUARANTEED PASS
| LATEST UPDATE
Forensic data duplication involves the creation of a file
that has every bit of information from the source in a raw
bit-stream format. - ....ANSWER...True.
What document is used as a written record consisting of all
processes involved in seizure, custody, control, transfer,
analysis, and disposition of physical or electronic
evidence? - ....ANSWER...Chain of custody document.
What is the process of permanently deleting or destroying
data from storage media? - ....ANSWER...Media
sanitization.
The process of acquiring volatile data from working
1
,computers )locked or in sleep condition) that are already
powered on is: - ....ANSWER...Live data acquisition.
Which of the following refers to the data stored in the
registries, cache, and RAM of digital devices? -
....ANSWER...Volatile information.
Where are deleted items stored on Windows Vista and
later versions of Windows? -
....ANSWER...Drive;\$Recycle.Bin
Where are deleted items stored on Windows 98 and earlier
versions of Windows? - ....ANSWER...Drive:\RECYCLED
Where are deleted items stored on the Windows 2000, XP,
and NT versions of Windows? -
....ANSWER...Drive:\RECYCLER
What is the maximum size limit for the Recycle Bin in
Windows prior to Windows Vista? - ....ANSWER. 3.99GB
Which of the following is NOT a feature of the Recover
My Files tool? - ....ANSWER...recovering files from a
2
,network drive.
What tool is used for format recovery, unformatting and
recovering deleted files emptied from the Recycle Bin, or
data lost due to partition loss or damage, software crash,
virus infection, or unexpected shutdown and supports
hardware RAID - ....ANSWER...EaseUS
Which tool undeletes and recovers lost files from hard
drives, memory cards, and USB flash drives? -
....ANSWER...Disk Digger
Which tool recovers files that have been lost, deleted,
corrupted, and even deteriorated? - ....ANSWER...Quick
Recovery
Which tool recovers lost data from hard drives, RAID,
photographs, deleted files, iPods, and removable disks
connected via FireWire or USB? - ....ANSWER...Total
Recall
Which tool scans the entire system for deleted files and
folders and recovers them? - ....ANSWER...Advanced
Disk Recovery
3
, Which tool for MAC recovers files from a crashed or virus-
corrupted hard drive? - ....ANSWER...Data Rescue 4
Which of the following are frequently left by criminals,
assisting investigators in understanding the process of
crime and the motive behind it, and allowing them to
attempt to identify the person(s) who committed it? -
....ANSWER...Fingerprints
In Detecting Rootkits, the following technique is used to
compare characteristics of all system processes and
executable files with a database of known rootkit
fingerprints. - ....ANSWER...Signature-Based Detection
In Anti Forensics Techniques, which of the following
techniques is used to hide a secret message within an
ordinary message and extract it at the destination to
maintain confidentiality of data? -
....ANSWER...Steganography
Which of the following consists of volatile storage? -
....ANSWER...RAM
4
